Advisories · Technology
feelec-yishu feelcrm-os.
Every CVE that names feelec-yishu feelcrm-os among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload
- feelec-yishu feelcrm-os
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection
- feelec-yishu feelcrm-os
- Other injection
- SQL injection
- CVSS 5.3 Medium
feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting
- feelec-yishu feelcrm-os
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.9 Medium
feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery
- feelec-yishu feelcrm-os
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting
- feelec-yishu feelcrm-os
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting
- feelec-yishu feelcrm-os
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection
- feelec-yishu feelcrm-os
- Other injection
- SQL injection